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CLAIMS 

What is claimed is: 

1 . A computer-implemented system for virtually linking a plurality 
of unrelated database systems, authenticating core person data input into said 
plurality of unrelated database systems, and managing through business rules 
said core person data, the system comprising: 

a person data repository for storing the core person data for all 
persons requiring visibility in any one of said plurality of unrelated database 
systems wherein said core person data comprises a person name and birth date 
identifier; 

a controller module connected to said person data repository and 
arranged to apply a set of business rules for restricting access, input, and 
modification of said core person data by said plurality of unrelated database 
systems; 

an access control module connected between a user interface of 
any one of said plurality of unrelated database systems and said controller 
module wherein said access control module monitors said user interface for 
input, querying or modification of said core person data and imposes said 
business rules when an attempt is made to input, query or modify said core 
person data; and 
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an authentication module connected to said controller module for 
authenticating as unique the addition of a person to said core person data by the 
person name and birth date identifier; 

whereby said core person data is authenticated and maintained for 
said plurality of unrelated database systems as a virtual relational database of 
the core person data. 

2. The apparatus of claim 1 wherein said person data repository 
comprises a database of said core person data connected to said business rules 
determinator. 

3. The apparatus of claim 1 wherein said person data repository 
comprises a relational database consisting of a subset of said plurality of 
unrelated database systems. 

4. The apparatus of claim 1 wherein said authentication module 
utilizes a search algorithm to determine if said person exists in said person data 
repository wherein said search algorithm attempts to match said person's name, 
birth month and birth day with names and birth data already in the person data 
repository. 

5. The apparatus of claim 4 wherein said search algorithm 
performs a soundex search of the name of said person. 
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6. The apparatus of claim 1 wherein said business rules 
comprise a set of contextual rules for allowing and/or disallowing the access, 
input, and modification of a component of said person data in said person data 
repository. 

7. The apparatus of claim 1 wherein said access control module 
comprises a program that is resident in the memory containing said user 
interface for said plurality of unrelated database systems but is apart from said 
user interface. 

8. The apparatus of claim 1 wherein a system interface is 
connected to said access control module said system interface creating a 
gateway between said plurality of unrelated database systems and said person 
data repository wherein said gateway translates the protocol of said plurality of 
unrelated database systems to the protocol necessary to access, query and 
modify said person data repository. 

9. The apparatus of claim 8 wherein said gateway is based on 
the CORBA®protocol. 
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10. A method for authenticating person data to a plurality of 
unrelated database systems comprising a plurality of databases, the method 
comprising: 

providing a person data repository comprising the person data 
wherein the person data repository is comprised of a subset of the plurality of 
databases; 

providing a controller module for monitoring a user interface of the 
plurality of unrelated database systems for a request to input new person data 
into any one the plurality of unrelated database systems; 

providing an access control module comprising business rules for 
receiving a request to input the new person data from the controller module; and 

applying the business rules of the access control module to restrict 
the input of the new person data into the plurality of databases if the new person 
data matches the person data existing in the plurality of databases; 

whereby the person data is authenticated to the plurality of 
unrelated database systems. 
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